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IN THE CLAIMS : 

Please cancel claims 9-22, 24 and 30-33 without prejudice. 

1. (Original) An elliptic curve arithmetic operation device for performing one of an 
addition and a doubling on an elliptic curve E\ y ^2^f(x) on a residue class ring of polynomials 
in two variables a and moduli of the residue class ring being polynomials P ^2'f(a) and h(a), 
where f(a)='a ^ a and b are constants, and h(a) is a polynomial in the variable a, the 
elliptic curve arithmetic operation device comprising: 

acquiring means for acquiring affine coordinates of at least one point on the 
elliptic curve E and operation information indicating one of the addition and the doubling, from 
an external source; 

transforming means for performing a coordinate transformation on the acquired 
affine coordinates to generate Jacobian coordinates, the coordinate transformation being 
transforming affine coordinates (<l> (a), Pxq>,(a)) of a given point on the elliptic curve E using 
polynomials 

X(a)-f(a)x(^(a) 
Y(a)=f(a) -2x(p(a) 
Z(a)=l 

into Jacobian coordinates (X(a) :Y(a) : PxZ(a)), ^ (a) and (p (a) being 
polynomials; and 

operating means for performing one of the addition and the doubUng indicated by 
the acquired operation information, on the generated Jacobian coordinates to obtain Jacobian 
coordinates of a point on the elliptic curve E. 
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2. (Original) The elliptic curve arithmetic operation device of Claim 1, 
wherein the acquiring means 

(a) in a first case acquires affine coordinates of two different points on the 
elliptic curve E and operation information indicating the addition, and 

(b) in a second case acquires affine coordinates of a single point on the elliptic 
curve E and operation information indicating the doubling, 

wherein the transforming means 

(a) in the first case performs the coordinate transformation on the acquired 
affine coordinates of the two different points to generate Jacobian coordinates of the two 
different points, and 

(b) in the second case performs the coordinate transformation on the acquired 
aflfine coordinates of the single point to generate Jacobian coordinates of the single point, and 

wherein the operating means 

(a) in the first case performs the addition indicated by the acquired operation 
inforaiation on the generated Jacobian coordinates of the two different points to obtain the 
Jacobian coordinates of the point on the elliptic curve E^ and 

(b) in the second case performs the doubling indicated by the acquired 
operation information on the generated Jacobian coordinates of the single point to obtain the 
Jacobian coordinates of the point on the elliptic curve E, 

3. (Original) The elliptic curve arithmetic operation device of Claim 2, 
wherein in the first case 

the acquiring means acquires affine coordinates 
(Xl(aX PxYl (a)) 
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(X2(a), PxY2 (a)) 

of the two different points on the elliptic curve E and the operation information 
indicating the addition, 

the transforming means performs the coordinate transformation on the acquired 
affine coordinates of the two different points to generate Jacobian coordinates 

(Xl(a) :Yl(a) : PxZl(a)) 

(X2(a) :Y2(a) : pxZ2 (a)) 
of the two different points, and 
the operating means computes 

Ul(a)=Xl(a)xZ2(a) ^2 

U2(a)=X2(a)xZl(a) ^2 

Sl(a)=Yl(a)xZ2(a) ^3 

S2(a) =Y2(a)xZl(a) ^3 

H(a)=U2(a) -Ul(a) 

r(a)=S2(a) -Sl(a) 
and computes 

X3(a) =-H(a) ^ 3-2xUJ (a)xH(a) ^ 2+r(a) ^2 

Y3(a) =-Sl(a) xH(a) ^3+r (a) x (Ul(a)xH(a) ^2-X3 (a)) 

Z3(a)=Zl(a) xZ2(a) xH(a) 
to obtain Jacobian coordinates (X3(a) :Y3(a) :pxZ3(a) of the point on the elliptic 

curve E. 

4. (Original) The elliptic curve arithmetic operation device of Claim 2, 
wherein in the second case 
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the acquiring means acquires affine coordinates 
(Xl(aXfixYl(a)) 

of the single point on the elliptic curve E and the operation information indicating 

the doubling, 

the transforming means performs the coordinate transformation on the acquired 
affine coordinates of the single point to generate Jacobian coordinates 

(XJ(a) :Yl(a) :/ixZJ(a)) 
of the single point, and 
the operating means computes 

S(aMxXl(a)xYl(a) ^2 

M(a)^3xXl(a) ^2+caZl(a) ^4xf(a) ^2 

T(a)^-2xS(a)+M(a) ^2 
and computes 

X3(a)^T(a) 

Y3(a)=-8xYl(a) ^ 4^M(a)x(S(a)-T(a)) 
Z3(a)=2xYl(a)xZl(a) 
to obtain Jacobian coordinates (X3(a) :Y3(a) :^xZ3(a)) of the point on the elliptic 

curve E, 

5. (Original) The elliptic curve arithmetic operation device of Claim 2, 
wherein the acquiring means 
(a) in the first case acquires affine coordinates 

(XHah ^xYl(a)) 
(X2(ah pxY2(a)) 
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of the two different points on the elliptic curve E and the operation information 
indicating the addition, and 

(b) in the second case acquires affine coordinates 
(Xl(aXfixYl(a)) 

of the single point on the elliptic curve E and the operation information indicating 

the doubling, 

wherein the transforming means 

(a) in the first case performs the coordinate transformation on the acquired 
affine coordinates of the two different points to generate Jacobian coordinates 

(XI(a) :Yl(a) :PxZl(a)) 
(X2(a) :Y2(a) :^xZ2(a)) 
of the two different points, and 

(b) in the second case performs the coordinate transformation on the acquired 
aflfine coordinates of the single point to generate Jacobian coordinates 

(XI(a) :Yl(a) :J3xZl(a)) 
of the single point, and 
wherein the operating means 
(a) in the first case computes 

Ul(a)=^Xl(a)xZ2(a) ^2 

U2(a)^X2(a)xZl(a) ^2 

Sl(a)=Yl(a)xZ2(a) ^3 

S2(a) =Y2(a)xZl(a) ^3 

H(a) =^U2(a) -Ul(a) 
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r(a) =S2(a) -Sl(a) 
and computes 

X2(a) =-H(a) -'3-2xUl(a)xH(a) 2-^r(a) ^2 

Y2(a) =-Sl(a)xH(a) ^ 3+r(a)x(Ul(a)xH(a) ^2-X3(a)) 

Z3(a) =Zl(a)xZ2(a)xH(a) 
to obtain Jacobian coordinates (X3(a) :Y3(a) :PxZ3(a)) of the point on the elliptic 

curve E, and 

(b) in the second case computes 

S(a) =4xXl(a)xYI(a) ^2 
M(a) ^3xXl(a) '^2+axZl(a) ^4xf(a) ^2 
T(a) =-2xS(a)+M(a) ^2 
and computes 

X3(a) =T(a) 

Y3(a) =-8xYl(a) ^4 +M(a)x(S(a) -T(a)) 
Z3(a) =2xYl(a)xZl(a) 
to obtain the Jacobian coordinates (X3(a) :Y3(a) :fixZ3(a)) of the point on the 
elliptic curve E. 

6. (Original) An elliptic curve order computation device for computing an order of 
an elliptic curve according to a Schoof-Elkies-Atkin algorithm, comprising the elliptic curve 
arithmetic operation device of Claim 1. 

7. (Original) The elliptic curve order computation device of Claim 6 comprising the 
elliptic curve arithmetic operation device of Claim 2. 
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8. (Original) The elliptic curve order computation device of Claim 7 comprising the 
elliptic curve arithmetic operation device of Claim 5. 

9. -22. (Cancelled) 

23. (Original) An elliptic curve arithmetic operation method used in an elliptic curve 
arithmetic operation device equipped with an acquiring means, a transforming means, and an 
operating means, for performing one of an addition and a doubling on an elliptic curve 
E: y ^2=f(x) on a residue class ring of polynomials in two variables a and moduli of the 
residue class ring being polynomials p ^ 2-f(a) and h(a)^ where f(a)=a ^ S-^aa-^b, a and b are 
constants, and h(a) is a polynomial in the variable «, the elliptic curve arithmetic operation 
method comprising: 

an acquiring step performed by the acquiring means, for acquiring affine 
coordinates of at least one point on the elliptic curve E and operation information indicating one 
of the addition and the doubling, from an external source; 

a transforming step performed by the transforming means, for performing a 
coordinate transformation on the acquired affine coordinates to generate Jacobian coordinates, 
the coordinate transformation being transforming afifme coordinates (a), Px(p(a)) of a given 
point on the elliptic curve E using polynomials 
X(a)^f(a)x^(a) 
Y(a) =f(a) -2x<p (a) 
Z(a) = ; 

into Jacobian coordinates (X(a) :Y(a) :PxZ(a)), ^ (a) and ^ (a) being polynomials; 

and 
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an operating step performed by the operating means, for performing one of the 
addition and the doubhng indicated by the acquired operation information, on the generated 
Jacobian coordinates to obtain Jacobian coordinates of a point on the elliptic curve E, 

24. (Cancelled) 

25. (Original) A computer-readable storage medium storing an elliptic curve 
arithmetic operation program used in an elliptic curve arithmetic operation device equipped with 
acquiring means, transforming means, and operating means, for performing one of an addition 
and a doubling on an elliptic cxuve E: y ^2=f(x) on a residue class ring of polynomials in two 
variables a and fi, moduli of the residue class ring being polynomials ^2-f(a) and h(a)y where 
f(a) =a ""i+aa+fe, a and b are constants, and h(a) is a polynomial in the variable a, the elliptic 
curve arithmetic operation program comprising: 

an acquiring step performed by the acquiring means, for acquiring afifine 
coordinates of at least one point on the elliptic curve E and operation information indicating one 
of the addition and the doubling, from an external source; 

a transforming step performed by the transforming means, for performing a 
coordinate transformation on the acquired affine coordinates to generate Jacobian coordinates, 
the coordinate transformation being transforming affine coordinates (a), Px(p(a)) of a given 
point on the elliptic curve E using polynomials 
X(a)=f(a)x(l>(a) 
Y(a) =f(a) -2x(p (a) 
Z(a) =7 
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into Jacobian coordinates (X(a) :Y(a) :PxZ(a)), <f> (a) and cp (a) being polynomials; 

and 

an operating step performed by the operating means, for performing one of the 
addition and the doubling indicated by the acquired operation information, on the generated 
Jacobian coordinates to obtain Jacobian coordinates of a point on the elliptic curve E, 

26. (Original) The storage medimn of Claim 25, wherein the acquiring step 

(a) in a first case acquires affine coordinates of two different points on the 
elliptic curve E and operation information indicating the addition, and 

(b) in a second case acquires affine coordinates of a single point on the elliptic 
curve E and operation information indicating the doubling, 

wherein the transforming step 

(a) in the first case performs the coordinate transformation on the acquired 
affine coordinates of the two different points to generate Jacobian coordinates of the two 
different points, and 

(b) in the second case performs the coordinate transformation on the acquired 
affine coordinates of the single point to generate Jacobian coordinates of the single point, and 

wherein the operating step 

(a) in the first case performs the addition indicated by the acquired operation 
information on the generated Jacobian coordinates of the two different points to obtain the 
Jacobian coordinates of the point on the elliptic curve £, and 

(b) in the second case performs the doubling indicated by the acquired 
operation information on the generated Jacobian coordinates of the single point to obtain the 
Jacobian coordinates of the point on the elliptic curve E. 
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27. (Original) The storage medium of Claim 26, wherein in the first case the 
acquiring step acquires afline coordinates 

(Xl(a), pxYl(a)) 
(X2(a), pxY2(a)) 

of the two different points on the elliptic curve E and the operation information 
indicating the addition, 

the transforming step performs the coordinate transformation on the acquired 
afGne coordinates of the two different points to generate Jacobian coordinates 

(Xl(a) :Yl(a) :pxZl(a)) 

(X2(a) :Y2(a) :PxZ2(a)) 
of the two different points, and 
the operating step computes 

Ul(a) =Xl(a)xZ2(a) ^2 

U2(a) =X2(a)xZl(a) ^2 

Sl(a) =Yl(a)xZ2(a) ^3 

S2(a) =Y2(a)xZl(a) ^3 

H(a) =U2(a) -Ul(a) 

r(a) =S2(a) -Sl(a) 
and computes 

X3(a) =-H(a) ^ 3-2xUl(a)xH(a) ^2+r(a) ^2 

Y3(a) =-Sl(a)xH(a) -3+r(a)x(Ul(a)xH(a) ^2-X3(a)) 

Z3(a) =^Zl(a)xZ2(a)xH(a) 
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to obtain Jacobian coordinates (X3(a) :Y3(a) :fixZ3(a)) of the point on the eUiptic 

curve E. 

28. (Original) The storage medium of Claim 26, 

wherein in the second case the acquiring step acquires affine coordinates 
(Xl(a)JxYl(a)) 

of the single point on the elliptic curve E and the operation information indicating 

the doubling, 

the transforming step performs the coordinate transformation on the acquired 
affine coordinates of the single point to generate Jacobian coordinates 

(Xl(a) :Yl(a) :pxZl(a)) 
of the single point, and 
the operating step computes 

S(a) =4xXl(a)xYl(a) ^2 

M(a) =3xXl(a) ^2+axZl(a) ^4xf(a) ^2 

T(a) ^-2xS(a) ^M(a) ^2 
and computes 

X3(a) ^T(a) 

Y3(a) =-8xYl(a) -4+M(a)x(S(a) -T(a)) 
Z3(a) =2xYl(a)xZl(a) 
to obtain Jacobian coordinates (X3(a) :Y3(a) :f3xZ3(a)) of the point on the elliptic 

curve E. 

29. (Original) The storage medium of Claim 26, 
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wherein the acquiring step 

(a) in the first case acquires afGne coordinates 

(Xl(a)JxYl(a)) 
(X2(ah PxY2(a)) 

of the two different points on the eUiptic curve E and the operation information indicating 
the addition, and 

(b) in the second case acquires affine coordinates 
(Xl(a)JxYl(a)) 

of the single point on the elliptic curve E and the operation information indicating 

the doubling, 

wherein the transforming step 

(a) in the first case performs the coordmate transformation on the acquired 
affine coordinates of the two different points to generate Jacobian coordinates 

(Xl(a) :Yl(a) :pxZl(a)) 
(X2(a) :Y2(a) :pxZ2(a)) 
of the two different points, and 

(b) in the second case performs the coordinate transformation on the acquired 
affine coordinates of the single point to generate Jacobian coordinates 

(Xl(a) :Yl(a) :PxZl(a)) 
of the single point, and 
wherein the operating step 
(a) in the first case computes 

Ul(a) ^Xl(a)xZ2(a) ^2 
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U2(a) =X2(a)xZl(a) ^2 

Sl(a) =Yl(a)xZ2(a) ^3 

S2(a) =Y2(a)xZl(a) ^3 

H(a) --m(a) -Ul(a) 

r(a) =S2(a) SI (a) 
and computes 

X3(a) =-H(a) ^ 3-2xUl (a)xH(a) ^2+r(a) ^2 

Y3(a) =-Sl(a)xH(a) ^ 3+r(a)x(Ul (a)xH(a) '^2-X3(a)) 

Z3(a) =Zl(a)xZ2(a)xH(a) 
to obtain Jacobian coordinates (X3(a) :Y3(a) :fixZ3 (a)) of the point on the elliptic 

curve E, and 

(b) in the second case computes 

S(a) =4xXl(a)xYl(a) ^2 
M(a) =3xXl(a) ^2+caZl(a) ^4xf(a) ^2 
T(a) =-2xS(a) +M(a) ^2 
and computes 

X3(a) =T(a) 

Y3(a) =-8xYl(a) -4+M(a) x(S(a) -T(a)) 
Z3(a) =2xYl(a)xZl(a) 
to obtain the Jacobian coordinates (X3(a) :Y3(a) :fixZ3(a)) of the point on the 
elliptic curve E. 

30. - 33. (Cancelled) 
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